Gajim - 2023-12-16


  1. polarian

    > Hi all ! does xmpp implements post-quantum cryptography yet ? no... maybe wait until we have a functioning quantum computer...

  2. polarian

    instead of fearmongering

  3. polarian

    but its not "XMPP" you would need to ask which servers would support it and clients, but thats mostly down to the TLS implementation

  4. polarian

    > Is the the point when XMPP will gain broad adoption? ;) I wish... everyone tells me "gajim looks like ass"

  5. polarian

    Gajim functions better than most chat platforms... yet people only care about eye candy

  6. bodqhrohro

    polarian: what's "not ass" for them?

  7. polarian

    > polarian: what's "not ass" for them? Discord

  8. bodqhrohro

    Then you're talking with scarabs.

  9. bodqhrohro

    Apps should look nice by respecting the system theme, and the system theme should be nice to provide eye candies everywhere, not just in certain non-native apps.

  10. amogus

    polarian: > no... maybe wait until we have a functioning quantum computer... > > instead of fearmongering its best to implement resistant cryptography before we need it. once we have "functioning" quantum computers, itll be too late by then

  11. cal0pteryx

    amogus, that's nothing Gajim specific though, and Gajim would not be a place to start

  12. amogus

    true, it would be better to update OMEMO or add a new crypto for encryption, and then implement it

  13. kurion

    Some time ago, I tried out Dino. IIRC, Conversations could not read/decrypt OMEMO mesasges received from Dino due to Dino using an upgraded OMEMO spec. Not sure if Gajim can.

  14. kurion

    is there a breaking change coming in future OMEMO spec? any ideas?

  15. cal0pteryx

    kurion, afaik there is no issue between Gajim and Dino

  16. cal0pteryx

    Only clients implementing OMEMO 0.8+ will have a different mode of encryption.

  17. fjklp

    It's probably not important but I think it would be nice if instead of "A setting not related to privacy has been changed" would instead tell us exactly what changed

  18. fjklp

    I guess it's just a matter of the extra code that translates each change into a sentence for humans?

  19. fjklp

    Rather than making sentences, we could simply print a message of '@var = <value/>'

  20. fjklp

    For example 'Room settings changed: muc#roomconfig_allowinvites = 1'

  21. cal0pteryx

    fjklp, I would not expose protocol to users. But yes, displaying individual messages sounds better

  22. fjklp

    True, exposing the protocol is probably not best for many users.

  23. fjklp

    I do see it as a goal to make it less necessary to understand how xmpp works in order to use it

  24. fjklp

    I was just thinking of a way to write less code to get the end result

  25. fjklp

    Now this has me wondering if there is a canonical friendly description of these protocol features

  26. bodqhrohro

    cal0pteryx: concealing XMPP-specific concepts from users makes it harder to get how does it differ from other IMs and what its benefits are.

  27. fjklp

    bodqhrohro: some people want things to "Just Work", and that's not necessarily something to fight against

  28. fjklp

    there's an ever-present tension there

  29. bodqhrohro

    fjklp: that's an unrealistic assumption.

  30. fjklp

    The more you require a user to learn, the more resistance there is to them switching to your thing

  31. bodqhrohro

    The more users expect things to work well, the more butthurt they have when they break. And they eventually break, inevitably.

  32. fjklp

    So, deliver a broken product to reduce expectations, and therefore reduce disappointment? lol

  33. fjklp

    Preemptive brokenness. It's a feature, not a bug.

  34. bodqhrohro

    fjklp: how honesty and verbosity are a brokenness lol?

  35. fjklp

    look at discord. It just works.

  36. bodqhrohro

    fjklp: it doesn't.

  37. fjklp

    people use it. people like it.

  38. bodqhrohro

    Furthermost, it's greedy.

  39. fjklp

    irrelevant

  40. fjklp

    we're talking about UI/UX

  41. bodqhrohro

    Their crazy spam detector bans innocent accounts.

  42. fjklp

    However, I'm not saying we should exactly try to make a discord clone. Discord would never show messages like "Room settings have changed"

  43. innocent

    > Their crazy spam detector bans innocent accounts. You tagged me or does my client automatically tagged me because I of my name?

  44. bodqhrohro

    innocent: see, that's one of XMPP-specific things many newcomers don't realize.

  45. innocent

    > Their crazy spam detector bans innocent accounts. You tagged me or did my client automatically tagged me because I of my name?

  46. bodqhrohro

    They attempt to @mention as in Twitter.

  47. bodqhrohro

    Despite XMPP is much older than Twitter lol.

  48. bodqhrohro

    And has its own conventions.

  49. bodqhrohro

    And a large userbase which knows it since 00s.

  50. bodqhrohro

    No need to make it something different for the sake of attracting the audience from other IMs.

  51. bodqhrohro

    Skype has went through this so only the brand has left, where is it now? Before Microsoft it's power was P2P sending of files of arbitrary size, now it's a typical cloud-based messenger with no significant benefits over other cloud-based messengers, they're perpetually behind others in terms of features.

  52. bodqhrohro

    XMPP should stand forward by things present in nothing else mainstream, otherwise there would be just no reason to switch if it would be just a poor clone of something else.

  53. bodqhrohro

    I already mentioned real-time texting as an example, yet it's already was implemented in early ICQ and forgotten since then, it might be cool and attractive for those who don't remember that lol.

  54. innocent

    @username instead of *username* would be better.

  55. bodqhrohro

    innocent: it already works how it does, no need to break compatibility.

  56. Geld

    > innocent wrote: > @username instead of *username* would be better. Nah.

  57. kurion

    @username is more intuitive, I think many will agree on this

  58. innocent

    > innocent: it already works how it does, no need to break compatibility. Yeah.

  59. Geld

    Typing just the name is enough of a mention.

  60. bodqhrohro

    "Accidental" highlighting was a neat way of trolling back then actually.

  61. bodqhrohro

    kurion: nothing intuitive if you have not seen it elsewhere.

  62. innocent

    But it may cause confusions if the message has username.

  63. Geld

    To me @ would be a nice shortcut to initialise name selection of curren chat's participants. Like a small popup textarea where as I type I can enter very quickly someone's name.

  64. bodqhrohro

    That's intentional, you can set a nickname "the" and express a butthurt when someone mentions you all *the* time lol.

  65. bodqhrohro

    Many clients support custom words to be highlighted for besides of the nickname, natively or via plugins.

  66. bodqhrohro

    For example, for tracking topics of interest.

  67. kurion

    > if you have not seen it elsewhere. true. but doesn't @username come off as "this message is intended to be sent to the address of username"?

  68. bodqhrohro

    Geld: tabstopping works faster than some kind of popups, and are prone to focus loss.

  69. bodqhrohro

    Popup widgets which interrupt the workflow and may steal the focus or cause interruptions are really annoying for touch typists.

  70. Geld

    > kurion wrote: >> if you have not seen it elsewhere. > true. but doesn't @username come off as "this message is intended to be sent to the address of username"? That's Discord way of doing it.

  71. bodqhrohro

    The neat official Discord's feature missing in Gajim is Ctrl+K lol.

  72. bodqhrohro

    For quick switching between chats and whatever.

  73. bodqhrohro

    It's present in Nheko, BTW.

  74. cal0pteryx

    > cal0pteryx: concealing XMPP-specific concepts from users makes it harder to get how does it differ from other IMs and what its benefits are. I did not say that. I said I don't want to expose protocol, i.e. protocol strings. I also said displaying individual, i.e. specific messages would be good.

  75. polarian

    > true, it would be better to update OMEMO or add a new crypto for encryption, and then implement it What are you hiding which is so important that we need to get super paranoid about post-quantum?

  76. polarian

    governments and companies will not finish quantum before they have quantum resistance

  77. polarian

    they need to protect their intellectual properly

  78. polarian

    they need to protect their intellectual property

  79. polarian

    people need to take a chill pill for a moment and focus on making XMPP more functional, not start stressing over "what if quantum breaks the encryption"

  80. fjklp

    > No need to make it something different for the sake of attracting the audience from other IMs. I'd like a syntax that allows me to say a user's name without pinging them, as well as the option to ping them. It's useful.

  81. polarian

    > Their crazy spam detector bans innocent accounts. me

  82. polarian

    I type fast

  83. polarian

    fuck them anyways, not like I want to use Discord but when so many open source projects are now on Discord (only) its almost impossible not to

  84. polarian

    > @username instead of *username* would be better. No... its so much nicer without the @, don't like it, go back to Discord 🙃

  85. polarian

    fjklp, nah.. IRC is the same

  86. polarian

    and IRC is holu

  87. polarian

    and IRC is holy

  88. cal0pteryx

    polarian, please leave out the profanity

  89. bodqhrohro

    fjklp: > I'd like a syntax that allows me to say a user's name without pinging them Impossibru, there in any way are legacy clients which would highlight them on bare substring, changing that in some of clients would only bring confusion.

  90. fjklp

    > governments and companies will not finish quantum before they have quantum resistance you don't seem to recognize that breaking encryption will allow decryption of stored old messages. You want to implement it as soon as possible, even if quantum breaking won't happen for decades. Still, not a gajim problem.

  91. bodqhrohro

    Different defaults for nickname suffix (: vs ,) were enough of confusion already.

  92. bodqhrohro

    (does anything but Gajim actually use `,`, huh?)

  93. fjklp

    > fjklp, nah.. IRC is the same How is that at all relevant? I'm not suggesting that xmpp should be an extension of irc.

  94. polarian

    > polarian, please leave out the profanity Apologies

  95. cal0pteryx

    bodqhrohro, nothing breaks if a "mention" standard is implemented by newer clients, while old clients still mention on exact matches with the username (while newer simply don't)

  96. polarian

    > you don't seem to recognize that breaking encryption will allow decryption of stored old messages. You want to implement it as soon as possible, even if quantum breaking won't happen for decades. Still, not a gajim problem. I do realise that, but that means as soon as TLSv1.3 is broken

  97. polarian

    these messages are open

  98. polarian

    why worry about the inevitable

  99. fjklp

    are you serious...

  100. fjklp

    I'm done

  101. bodqhrohro

    cal0pteryx: the point is to explicitly avoid mentions, I told that's impossible because there's no guarantee that receiving buddy's clients wouldn't highlight by bare substring anyway.

  102. fjklp

    it is possible for the clients that implement the mention standard

  103. polarian

    fjklp, so you are saying we should all put tin foil hats on and worry about how anything we send today could be compromised 10 years down the line?

  104. fjklp

    then old clients continue to work as they always did

  105. polarian

    a lot of post crypto algorithms are not highly tested yet

  106. polarian

    they are experimental

  107. polarian

    fear mongering is not going to fix the problem

  108. polarian

    and you can say "make OMEMO post quantum"

  109. polarian

    but you say that like its as easy as that

  110. fjklp

    Prioritizing forward security is not paranoia, nor is it fear mongering. This topic is dead.

  111. polarian

    fjklp, and you are someone who can't take the fact others have differing opinions...

  112. polarian

    using experimental algorithms could end up to data being compromised even faster

  113. polarian

    _could_

  114. polarian

    > cal0pteryx: the point is to explicitly avoid mentions, I told that's impossible because there's no guarantee that receiving buddy's clients wouldn't highlight by bare substring anyway. bodqhrohro, And how would you ensure that clients would properly highlight an mention with an @ in it?

  115. polarian

    You never know

  116. polarian

    they could be using any client

  117. bodqhrohro

    Using a non-ASCII nickname is another way of trolling touch typists for a long time.

  118. polarian

    bodqhrohro, and whats your suggestion, sitting an @ at the beginning and calling it a day?

  119. bodqhrohro

    polarian: some newcomers already do.

  120. bodqhrohro

    Nothing to be done really.

  121. polarian

    They are just Discord users, they will figure out how to do things eventually

  122. bodqhrohro

    I'm not sure if that's not a default already in Beagle.IM lol.

  123. bodqhrohro

    polarian: why only Discord? It's a widespread convention among modern messengers.

  124. bodqhrohro

    Twitter has pioneered it, as I told.

  125. bodqhrohro

    Others just blindcopied and eventually it became a new standard de-facto.

  126. cal0pteryx

    Since there is no standard yet, Gajim won't change anything

  127. bodqhrohro

    > yet Sounds terrifying.

  128. polarian

    bodqhrohro, w

  129. polarian

    bodqhrohro,

  130. polarian

    thats where most edgy teens are from 🙃

  131. Geld

    bodqhrohro: ok bro, can you code that?

  132. bodqhrohro

    Geld: code what?

  133. Geld

    @

  134. polarian

    what is the point!!!

  135. Geld

    Functionality in Gajim

  136. polarian

    it depends on the client

  137. bodqhrohro

    I still can't even run freshest Gajim probably lol.

  138. Geld

    So since you can't contribute anything to the code and since your idea has been negatively received by everyone, please move on.

  139. bodqhrohro

    Last commit working for me is 24548c14e87e5044eebaf0092ab27ef19cfb8659, before the OMEMO support being merged into the main codebase.

  140. bodqhrohro

    Geld: what idea?

  141. Geld

    K I messed up

  142. Geld

    Anyone who wanted @username plz stfu thank you for attention lol 😆

  143. Geld

    Whoever who wanted @username plz stfu thank you for attention lol 😆

  144. Geld

    Whoever wanted @username plz stfu thank you for attention lol 😆

  145. bodqhrohro

    Actually, tabstopping does not work with @ as of yet.

  146. lovetox

    fjklp: the protocol does not tell us what changed, regarding the privacy message

  147. debacle

    OMEMO carbons are broken for me atm. In both directions, Gajim 1.8.4 on both devices. How can I accept my own keys, again?

  148. fjklp

    > fjklp: the protocol does not tell us what changed, regarding the privacy message then how do you detect that there was a change to present? you just go by the fact that we receive a status code 104? Even if this, gajim can know what changed if it caches the current variables and checks what changes when it does a discoinfo.

  149. fjklp

    > fjklp: the protocol does not tell us what changed, regarding the privacy message then how do you detect that there was a change to present? you just go by the fact that we receive a status code 104? Even if this, gajim can know what changed if it caches the current variables and checks what changes when it does a discoinfo. But it would also be nice if the server tells us what changes.

  150. fjklp

    Also, how do we know that the setting was "not related to privacy"?

  151. lovetox

    it does not tell us what changed

  152. lovetox

    it tells us that a setting regarding privacy was changed

  153. lovetox

    and gajim tells exactly that to the user

  154. lovetox

    would be a diff nice, yeah, but the server does not give us one, and i cannot think of a trivial implementation to diff 2 disco info and translate that into sentences which make sense to the user

  155. fjklp

    I guess we go by status code 104 to know it's non-privacy-related

  156. lovetox

    yes

  157. fjklp

    However, afaict, we could track changes manually

  158. fjklp

    However, afaict, we could track changes manually, maybe you don't care to

  159. lovetox

    much work little gain

  160. lovetox

    you can simply ask the moderator what was changed

  161. lovetox

    or look if anything important to you changed

  162. bodqhrohro

    Why do we need a rotary phone, just call and operator and ask! Aren't you overly introverted to talk to the operator, right?

  163. bodqhrohro

    Why do we need a rotary phone, just call an operator and ask! Aren't you overly introverted to talk to the operator, right?

  164. cal0pteryx

    bodqhrohro, you're not helpful

  165. bodqhrohro

    cal0pteryx: I'm not supposed to be helpful, I'm not a phone operator.

  166. bodqhrohro

    Or were they called dispatchers?

  167. fjklp

    Out of curiosity, say I submitted a MR for this functionality, would that be viewed as creating undesired compexity?

  168. Roi

    Where can I find the chat history of all contacts and muc and see/export/delete it? I do not find it anymore in the "new" GUI...

  169. cal0pteryx

    Roi, you find them in each individual chat (try searching from the search bar)

  170. cal0pteryx

    exporing is done via accounts > your account > privacy > export

  171. Roi

    Thank you. I'm a step closer. :-)

  172. Roi

    Is there a way to export just a single muc?

  173. Roi

    Or contact?

  174. cal0pteryx

    exporting: no. removing: yes (via chat details)

  175. Roi

    Okay thank you. Too bad.